[Dovecot] userdb with LDAP

[Tobi]

As expected it was human error :-)
I never checked the form of the uid in LDAP. I just asumed it has to be 
user at domain.tld but it was only user
So dovecot was perfectly right in not finding any matching record. After 
changing the form of the uid generation for LDAP to user at domain.tld I 
found that my user_attrs and pass_attrs were simply wrong. So changed to

pass_attrs = =password=,=proxy=y,=nopassword=y,mailhost=host

and commented user_attrs (seems not needed for proxy only)

tobi

Am 06.09.2013 13:43, schrieb Tobi:
> Hi list
>
> I currently having troubles to "connect" dovecot (for proxy) to an
> existing LDAP.
> If I got the dovecot wiki right only userdb is needed for a proxy setup
> where the proxy does not authenticate but just forward to the backend
> for authentication.
>
> So I setup the following in dovecot-ldap.conf.ext
>
> user_attrs = =password,=y=nopasswd,=y=proxy,mailHost=host
> user_filter = (&(objectClass=posixAccount)(uid=%u))
>
> There is a field mailHost in LDAP which defines the correct backend for
> the user
>
> and defined userdb in auth-ldap.conf.ext
>
> userdb {
>    driver = ldap
>    args = /etc/dovecot/dovecot-ldap.conf.ext
> }
>
> the same config again in auth-system.conf.ext
>
> The problem is that dovecot always reports back that the user is
> unknown. I turned on ldap debug and got the following
>
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Debug: ldap(tobi.szyndler at datapark.li,213.196.149.1,<88FSBrXlSQDVxJUB>): pass search: base=dc=datapark,dc=li scope=subtree filter=(&(objectClass=posixAccount)(uid=tobi.szyndler at datapark.li)) fields=mailHost
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_search
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(&(objectClass=posixAccount)(uid=tobi.szyndler at datapark.li))"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: AND
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter_list "(objectClass=posixAccount)(uid=tobi.szyndler at datapark.li)"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(objectClass=posixAccount)"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: simple
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_simple_filter: "objectClass=posixAccount"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(uid=tobi.szyndler at datapark.li)"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: simple
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_simple_filter: "uid=tobi.szyndler at datapark.li"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_build_search_req ATTRS: mailHost
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_send_initial_request
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_send_server_request
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_result ld 0x7fbc43fb4110 msgid -1
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg ld 0x7fbc43fb4110 msgid -1 (timeout 0 usec)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg continue ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Connections:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: * host: 213.196.149.116  port: 389  (default)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   refcnt: 2  status: Connected
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   last used: Fri Sep  6 13:06:10 2013
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Outstanding Requests:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:  * msgid 4,  origid 4, status InProgress
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:    outstanding referrals 0, parent count 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   ld 0x7fbc43fb4110 request count 1 (abandoned 0)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Response Queue:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:    Empty
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   ld 0x7fbc43fb4110 response count 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList returns ld 0x7fbc43fb4110 NULL
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_int_select
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 msgid 4 message type search-result
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 0 new referrals
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg:  mark request completed, ld 0x7fbc43fb4110 msgid 4
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: request done: ld 0x7fbc43fb4110 msgid 4
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <>
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_free_request (origid 4, msgid 4)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_parse_result
> Sep  6 13:06:10 kolab-frontend dovecot: auth: ldap(tobi.szyndler at datapark.li,213.196.149.1,<88FSBrXlSQDVxJUB>): unknown user
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Debug: ldap(tobi.szyndler at datapark.li,213.196.149.1,<88FSBrXlSQDVxJUB>): pass search: base=dc=datapark,dc=li scope=subtree filter=(&(objectClass=posixAccount)(uid=tobi.szyndler at datapark.li)) fields=mailHost
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_search
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(&(objectClass=posixAccount)(uid=tobi.szyndler at datapark.li))"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: AND
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter_list "(objectClass=posixAccount)(uid=tobi.szyndler at datapark.li)"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(objectClass=posixAccount)"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: simple
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_simple_filter: "objectClass=posixAccount"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: "(uid=tobi.szyndler at datapark.li)"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_filter: simple
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: put_simple_filter: "uid=tobi.szyndler at datapark.li"
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_build_search_req ATTRS: mailHost
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_send_initial_request
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_send_server_request
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_msgfree
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_result ld 0x7fbc43fb4110 msgid -1
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg ld 0x7fbc43fb4110 msgid -1 (timeout 0 usec)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg continue ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Connections:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: * host: 213.196.149.116  port: 389  (default)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   refcnt: 2  status: Connected
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   last used: Fri Sep  6 13:06:10 2013
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Outstanding Requests:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:  * msgid 5,  origid 5, status InProgress
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:    outstanding referrals 0, parent count 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   ld 0x7fbc43fb4110 request count 1 (abandoned 0)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Response Queue:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:    Empty
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   ld 0x7fbc43fb4110 response count 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList returns ld 0x7fbc43fb4110 NULL
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_int_select
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_result ld 0x7fbc43fb4110 msgid -1
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg ld 0x7fbc43fb4110 msgid -1 (timeout 0 usec)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg continue ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Connections:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: * host: 213.196.149.116  port: 389  (default)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   refcnt: 2  status: Connected
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   last used: Fri Sep  6 13:06:10 2013
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Outstanding Requests:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:  * msgid 5,  origid 5, status InProgress
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:    outstanding referrals 0, parent count 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   ld 0x7fbc43fb4110 request count 1 (abandoned 0)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Response Queue:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:    Empty
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   ld 0x7fbc43fb4110 response count 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList returns ld 0x7fbc43fb4110 NULL
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_int_select
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 msgid 5 message type search-result
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg: ld 0x7fbc43fb4110 0 new referrals
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: read1msg:  mark request completed, ld 0x7fbc43fb4110 msgid 5
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: request done: ld 0x7fbc43fb4110 msgid 5
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: res_errno: 0, res_error: <>, res_matched: <>
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_free_request (origid 5, msgid 5)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_parse_result
> Sep  6 13:06:10 kolab-frontend dovecot: auth: ldap(tobi.szyndler at datapark.li,213.196.149.1,<88FSBrXlSQDVxJUB>): unknown user
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_msgfree
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_result ld 0x7fbc43fb4110 msgid -1
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg ld 0x7fbc43fb4110 msgid -1 (timeout 0 usec)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: wait4msg continue ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Connections:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: * host: 213.196.149.116  port: 389  (default)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   refcnt: 1  status: Connected
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   last used: Fri Sep  6 13:06:10 2013
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Outstanding Requests:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:    Empty
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   ld 0x7fbc43fb4110 request count 0 (abandoned 0)
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ** ld 0x7fbc43fb4110 Response Queue:
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:    Empty
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error:   ld 0x7fbc43fb4110 response count 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList ld 0x7fbc43fb4110 msgid -1 all 0
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_chkResponseList returns ld 0x7fbc43fb4110 NULL
> Sep  6 13:06:10 kolab-frontend dovecot: auth: Error: ldap_int_select
>
> I'm pretty sure that the error is 30cm in front of the screen :-) but I
> really don't see the problem
>
> Any help is highly appreciated
> Thanks
>
> tobi
>
>